[ewg] OFA EWG meeting will be on Monday March 30th 2015 at 9:00 AM Pacific

[Peter Kjellström]

On Tue, 31 Mar 2015 22:32:47 -0400
"Rupert Dance" <rsdance at soft-forge.com> wrote:

> Peter,
> 
> Thanks for the note about the "Verbs mem reg CVE". Could you point me
> to the detail on this issue so I can look into it.

One line important fix in verbs umem.c originally found by Mlnx.
Surprised this info wasn't better spread. Here's all relevant info I
know of:

https://community.mellanox.com/message/4402#4402
https://bugzilla.redhat.com/show_bug.cgi?id=1181166
http://www.openwall.com/lists/oss-security/2015/03/17/8
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8159

/Peter

> Thanks
> 
> Rupert
> 
> -----Original Message-----
> From: Peter Kjellström [mailto:cap at nsc.liu.se] 
> Sent: Monday, March 30, 2015 11:31 AM
> To: Rupert Dance
> Cc: 'OpenFabrics EWG'
> Subject: Re: [ewg] OFA EWG meeting will be on Monday March 30th 2015
> at 9:00 AM Pacific
> 
> On Mon, 30 Mar 2015 09:54:07 -0400
> "Rupert Dance" <rsdance at soft-forge.com> wrote:
> ...
> > Agenda
> ...
> > OFED 3.18 status
> ...
> > ·         OFED 3.18 – latest daily build 03/29/2015
> 
> Just noticed that the Verbs mem reg CVE from a while ago still isn't
> fixed in that daily and absent from the list of issues in the e-mail.
> Mabye something for RC2?
> 
> /Peter
> 
>